The new version of the package provides better protection against attackers who want to use the S3 tokens to gain access to the concurrent Swift API operations. In addition, the swift3 plugin now supports Keystone v3.
I'm okay with a backport of 1.11 to OSP11. It should be fully compatible.
But let's not go wild with anything other than 1.7 in OSP10, unless a
specific customer complains. It may work, but didn't try and I cannot
be certain right away.
It's probably a good thing. I'll fix any problems if they crop up with 1.11
even in OSP10. I didn't want to risk it but if it's a done deal, it's fine.
Created attachment 1288087[details]
Removal of dependency checking
I have reviewed the proposed update (the one that fails to load due to
Python's built-in package dependencies) and it appears that everything
is still compatible. So we can just switch that off.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHBA-2017:1593